Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: ljlULGsalkCuQXDqEfCDkXL5utwKGioStqAI+o3BWpk=
Subject key identifier: E0:3F:84:B8:96:F6:46:45:44:86:7B:1A:F0:23:3E:35:63:45:2A:2E
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 019D28BB1B37DE36083E1E1FADA208B468C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0E4F
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: Ki5vJms-JWVXQqNHEorfbuz5XjI.roa (hash: 5AUIEMOenxKdLyL4gm/joj3B8MRPpzoFh4cs7HPB6rs=)
2: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: E1mCp/JhBzh41YK7rMAHB3KAsdGSNPVhzpW8et33aOY=)
3: mwVyEN1yciChxmW_Q0x3K-DTLf0.roa (hash: 2DWQTjsCCu0McKSPCWKJ9eLeJdWuKpAg3qQ7vPTXYnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1b:37:de:36:08:3e:1e:1f:ad:a2:08:b4:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=e03f84b896f6464544867b1af0233e3563452a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:b3:cb:b6:e5:d4:53:d4:7b:36:35:02:cb:
23:63:3d:0a:2d:f5:d2:55:e1:db:38:57:15:e8:f8:
c0:06:b5:cf:db:8d:e3:96:2a:50:8a:4f:8b:85:99:
f3:b6:2b:e7:50:42:cc:e7:d4:82:d5:6c:ce:cd:a6:
78:4a:0a:e5:a3:b5:a8:8f:2b:39:e9:75:90:6f:f1:
5a:5f:95:c2:4a:5c:b9:5a:d6:df:2b:29:ac:cf:38:
2a:79:2d:a8:51:aa:8c:dd:a1:95:f8:fa:12:37:c6:
f7:4e:51:28:8b:46:0d:e8:49:f7:83:a1:ab:28:05:
5f:85:c5:a5:7e:4c:d3:c9:18:33:75:1e:85:77:b4:
8d:2e:3e:07:a2:61:d9:05:97:4b:bd:39:04:a6:2e:
d3:7a:06:7a:ac:e2:12:ab:4b:84:7a:c5:2e:9f:c3:
88:dc:63:77:8e:de:83:32:d2:31:fd:4b:09:f1:37:
09:5b:39:ff:db:de:dc:ec:c8:20:40:d2:5b:b3:c1:
64:15:27:5e:f7:2f:a4:6c:13:25:a4:03:c6:4d:08:
d9:75:46:c0:2d:25:a9:0d:56:ac:4b:9f:3c:1a:06:
46:45:6f:a4:04:04:be:ba:01:c3:d7:40:e0:f3:21:
2b:16:aa:69:bf:07:4a:08:46:bc:fa:3d:95:87:07:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:84:B8:96:F6:46:45:44:86:7B:1A:F0:23:3E:35:63:45:2A:2E
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5b:b0:96:70:10:1d:78:77:ae:da:43:59:aa:82:32:b4:db:
0d:20:b2:fb:20:af:e7:c0:4b:1e:d8:bd:c5:1f:05:73:30:4e:
d5:4c:1c:04:d5:c7:62:8b:41:b0:78:72:96:bd:dd:83:53:22:
6c:79:e8:dc:ec:7f:00:2f:8f:83:ba:09:6f:e6:f5:ff:de:cb:
5f:36:19:4c:31:4b:73:a0:3d:1e:47:f8:10:87:72:e0:60:b1:
25:fb:d3:f4:84:37:d1:f3:09:b0:58:77:d5:a1:99:8b:73:14:
e2:90:b0:ef:97:bf:14:ec:5d:10:24:f7:5b:ce:17:78:f7:9f:
fe:ec:04:50:83:39:1b:b7:48:3f:73:03:c8:a3:d8:c3:b0:ae:
0d:d9:c6:2d:54:20:29:fd:93:fe:98:7d:d2:80:2c:77:7c:20:
3d:ad:09:83:44:5a:62:49:1a:6b:90:9d:8a:12:9c:05:f1:aa:
9e:98:74:92:69:87:54:95:be:b4:9f:e8:46:e6:89:3b:f2:4a:
94:21:34:ff:b1:3f:f0:45:f2:c6:c3:33:63:c0:d5:ce:c5:bf:
d1:9f:de:99:e6:f4:b3:53:5d:5b:a1:44:70:8e:75:c4:5e:52:
98:fe:60:01:03:cd:01:ff:bb:52:1a:55:42:b9:4b:6a:0c:38:
0c:0b:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:27:03 2026 by rpki-client